Hiding false positives, revoked credentials, etc.

Sometimes, Security for Confluence will find false positives, credentials which have already been revoked, etc. If this happens, you can review the finding. This marks the finding, as well as any other findings which exactly match it, as reviewed in the current and future scans.

In the Soteri Dashboard, reviewed findings are not counted towards the total finding count when determining if a space is secure.

Reviewing a finding from the Security Analysis

Click the Mark reviewed button on the finding you want to review.

This will open a confirmation dialog. Note that marking a finding as reviewed saves the exact string captured by the rule (in this case, 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). That exact string will be marked as reviewed for all existing and future scans.

Once reviewed, the finding will disappear from the Security Analysis, but can be shown again with the “Show reviewed” toggle, where it can also be unmarked.

Note that reviewed findings are scoped to a space; that is, identical findings across multiple spaces must be reviewed separately.